Configuring The Adaptive Security Appliance For A Dmz Deployment - Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Manual

Configuring the Adaptive Security Appliance for a DMZ Deployment

Configuring the Adaptive Security Appliance for a
DMZ Deployment
Note
Cisco ASA 5500 Series Getting Started Guide
8-8
The internal client requests a web page from the public IP address of the DMZ
2.
web server. The adaptive security appliance receives the request on its inside
interface.
The adaptive security appliance translates the public IP address of the DMZ
3.
web server to its real address (209.165.200.225 -> 10.30.30.30) and forwards
the request out of its DMZ interface to the web server.
When the DMZ web server responds to the request, the adaptive security
4.
appliance receives the data on its DMZ interface and forwards the data out of
its inside interface to the user.
The procedures for creating this configuration are detailed in the remainder of this
chapter.
This section describes how to use ASDM to configure the adaptive security
appliance for the configuration scenario shown in
sample parameters based on the scenario.
This configuration procedure assumes that the adaptive security appliance already
has interfaces configured for the inside interface, the outside interface, and the
DMZ interface. Be sure that the DMZ interface security level is set between 0 and
100. (A common choice is 50.)
If you need to set up interfaces on the adaptive security appliance, you can use the
Startup Wizard in ASDM. For more information about using the Startup Wizard,
see Chapter 7, "Configuring the Adaptive Security Appliance."
The section includes the following topics:
Configuration Requirements, page 8-9
•
Information to Have Available, page 8-10
•
• Enabling Inside Clients to Communicate with Devices on the Internet,
page 8-10
Chapter 8 Scenario: DMZ Configuration
Figure 8-1. The procedure uses
78-19186-01